NA

CVE-2023-1250

Published: 20/03/2023 Updated: 07/11/2023
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 0

Vulnerability Summary

Improper Input Validation vulnerability in OTRS AG OTRS (ACL modules), OTRS AG ((OTRS)) Community Edition (ACL modules) allows Local Execution of Code. When creating/importing an ACL it was possible to inject code that gets executed via manipulated comments and ACL-names This issue affects OTRS: from 7.0.X prior to 7.0.42, from 8.0.X prior to 8.0.31; ((OTRS)) Community Edition: from 6.0.1 up to and including 6.0.34.

Vulnerable Product Search on Vulmon Subscribe to Product

otrs otrs